Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
File:                     k4vok1GoGkLfhHvzkxNy0JgwREY.cer (raw, json)
Hash identifier:          NWuZFMLlqkpFumFFpOW8n7d+r3s7DfB7L0MpLKzuKus=
Subject key identifier:   93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2579
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 02:34:16 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 327987
                          IP: 41.78.244.0/22
                          IP: 196.250.192.0/21
                          IP: 2c0f:6800::/32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9593 (0x2579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 02:34:16 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:80:2a:9f:74:2e:b8:72:8d:1e:76:ce:12:
                    b3:66:31:c1:16:42:90:26:85:69:bf:8e:b5:9b:b1:
                    79:34:dd:42:6a:00:52:f0:84:85:a5:e8:63:a2:bb:
                    bb:58:fa:4b:04:bc:c1:1c:e2:aa:bf:c3:0e:82:d1:
                    cd:e3:49:b1:7b:8d:e9:ab:90:92:df:3f:1e:dd:7a:
                    68:bd:63:65:99:0d:4f:f5:ce:e5:ee:96:25:04:49:
                    61:06:ad:60:c2:77:62:e5:38:58:05:cc:22:3a:fd:
                    1e:8d:a4:cd:5d:78:08:58:ca:86:19:42:6a:96:a7:
                    45:ef:89:4b:08:8f:c9:37:d8:81:ea:50:b6:d6:48:
                    d7:6b:ad:69:4b:49:2d:7c:7d:5c:27:46:57:cc:0a:
                    fa:34:8b:70:92:bd:b4:5f:8a:19:fd:82:26:94:71:
                    68:38:63:b4:a8:5c:b2:55:e7:69:74:e4:6f:88:25:
                    35:12:36:9c:80:4c:cf:4e:d7:71:b0:b5:4a:20:cb:
                    99:74:db:18:ad:f9:bc:f8:d6:a0:dd:7a:cc:de:4c:
                    8b:ed:9e:cb:f2:ea:bf:a4:1a:5f:53:b0:65:b4:af:
                    20:49:1e:37:b2:62:b4:41:e8:c2:0a:c7:d2:70:3b:
                    9c:63:a0:1d:8e:d3:dc:bd:dd:6f:ef:c0:de:23:0a:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  327987

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.78.244.0/22
                  196.250.192.0/21
                IPv6:
                  2c0f:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:bf:f0:0e:f4:95:c2:f5:3f:ef:db:d1:00:46:03:7a:85:
         19:e3:ae:0f:46:30:91:8f:25:94:68:28:ef:4e:c7:00:3a:38:
         59:d1:76:7b:51:7c:35:ed:87:88:a1:09:5c:1a:00:e9:d1:b6:
         8b:fa:cd:86:5a:27:ce:e4:0b:fa:60:ed:be:f0:46:75:e1:73:
         43:6f:d3:54:1a:f4:42:af:3c:21:15:83:b6:6a:f9:60:96:a4:
         ec:ea:5c:eb:a9:6c:9b:80:61:03:bb:d4:94:f8:3b:a3:68:10:
         99:4c:08:d1:d6:96:95:19:81:5d:c2:c7:ad:bf:90:37:3d:a1:
         9e:5f:91:02:87:29:d9:a6:82:95:94:22:0b:9a:e0:a8:ea:83:
         93:b1:26:72:52:4b:91:fe:09:4d:72:73:b0:4e:f2:6c:a4:16:
         a6:45:74:4d:1f:49:7a:2e:a1:59:4a:27:a5:df:4e:09:db:45:
         29:e8:53:57:4b:aa:72:c3:98:ee:eb:f5:3e:15:9d:62:a5:de:
         31:5e:36:c5:b6:93:fd:da:80:69:f7:66:62:33:d4:cf:8b:c7:
         34:89:73:ab:2f:0e:93:a4:81:47:e4:42:1b:01:c5:d9:67:29:
         4a:b2:ea:79:44:2e:ee:73:19:74:cf:9e:11:33:94:a3:e2:b9:
         49:94:92:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:43 2024 by rpki-client on console-fra.rpki-client.org